CVE-2026-109397 | Thelia up to 3.1.1/3.2.0 sanitizeFileName unrestricted upload

October 12, 2026 Yanac

A vulnerability was found in Thelia up to 3.1.1/3.2.0 and classified as problematic. Affected by this vulnerability is the function FileManager::sanitizeFileName. Such manipulation leads to unrestricted upload.

This vulnerability is documented as CVE-2026-109397. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More